Sr. Application Security Manager

📋 Description

• Own DV's application security program (SAST, SCA, DAST, ASPM tooling).
• Drive ASVS adoption with dashboards and branch coverage.
• Lead SBOM, license compliance, and software supply chain security.
• Embed security across CI/CD and SSDLC with DevOps.
• Develop security metrics and MTTR reporting for leadership.
• Lead vulnerability remediation forums with engineering teams.

🎯 Requirements

• 10+ years in information security; 3+ years in technical management.
• Expertise in two+ domains: app security, AI/ML security, supply chain, pentesting, or cloud.
• Hands-on with AppSec tooling: SAST, SCA, DAST, ASPM, and API security.
• Experience securing AI/ML systems; OWASP Top 10 for LLMs; NIST AI RMF.
• Cloud-native skills in GCP; Kubernetes; Terraform desirable.
• DevSecOps experience: CI/CD security, threat modeling, and secure coding.

🎁 Benefits

• Executive support and real budget to build a best-in-class program.
• Modern tooling and resources for security engineering.
• Opportunity to lead Application, AI, and security engineering programs.
• Collaborate with global engineering teams across DV.